All of lore.kernel.org
 help / color / mirror / Atom feed
From: kernel test robot <oliver.sang@intel.com>
To: Matthew Wilcox <willy@infradead.org>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>, <oliver.sang@intel.com>
Subject: [willy-pagecache:folio-mk-pte] [mm]  af07c8c757: segfault_at_ip_sp_error
Date: Thu, 6 Feb 2025 16:38:49 +0800	[thread overview]
Message-ID: <202502061612.1f8d78d8-lkp@intel.com> (raw)



Hello,

kernel test robot noticed "segfault_at_ip_sp_error" on:

commit: af07c8c75785d3a4f6f07fd9f55889eaddc8d7b6 ("mm: Set the pte dirty if the folio is already dirty")
git://git.infradead.org/users/willy/pagecache folio-mk-pte

in testcase: boot

config: i386-randconfig-141-20250201
compiler: gcc-12
test machine: qemu-system-i386 -enable-kvm -cpu SandyBridge -smp 2 -m 4G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+-------------------------------+------------+------------+
|                               | d15aed2013 | af07c8c757 |
+-------------------------------+------------+------------+
| boot_successes                | 12         | 0          |
| boot_failures                 | 0          | 12         |
| segfault_at_ip_sp_error       | 0          | 12         |
| BUG:kernel_hang_in_test_stage | 0          | 12         |
+-------------------------------+------------+------------+


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202502061612.1f8d78d8-lkp@intel.com


[   14.966355][    T1]     vga=normal
[   14.967107][    T1]     audit=0
[   14.967848][    T1]     ia32_emulation=on
[   14.968654][    T1]     riscv_isa_fallback=1
[   15.926262][    C1] random: crng init done
[   15.970491][   T82] rc.local[82]: segfault at 6fb931b8 ip b7fe4c4b sp bfc82840 error 4 in ld-2.15.so[ac4b,b7fda000+20000] likely on CPU 1 (core 1, socket 0)
[ 15.975531][ T82] Code: ec 2c 8b 90 4c 01 00 00 89 5c 24 1c e8 69 df 00 00 81 c3 c2 63 01 00 89 74 24 20 85 d2 89 7c 24 24 89 6c 24 28 74 5b 8b 52 04 <8b> 3a 89 b8 78 01 00 00 8b 4a 08 8b 72 04 8d 69 ff 85 cd 75 69 89
All code
========
   0:	ec                   	in     (%dx),%al
   1:	2c 8b                	sub    $0x8b,%al
   3:	90                   	nop
   4:	4c 01 00             	add    %r8,(%rax)
   7:	00 89 5c 24 1c e8    	add    %cl,-0x17e3dba4(%rcx)
   d:	69 df 00 00 81 c3    	imul   $0xc3810000,%edi,%ebx
  13:	c2 63 01             	ret    $0x163
  16:	00 89 74 24 20 85    	add    %cl,-0x7adfdb8c(%rcx)
  1c:	d2 89 7c 24 24 89    	rorb   %cl,-0x76dbdb84(%rcx)
  22:	6c                   	insb   (%dx),%es:(%rdi)
  23:	24 28                	and    $0x28,%al
  25:	74 5b                	je     0x82
  27:	8b 52 04             	mov    0x4(%rdx),%edx
  2a:*	8b 3a                	mov    (%rdx),%edi		<-- trapping instruction
  2c:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
  32:	8b 4a 08             	mov    0x8(%rdx),%ecx
  35:	8b 72 04             	mov    0x4(%rdx),%esi
  38:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  3b:	85 cd                	test   %ecx,%ebp
  3d:	75 69                	jne    0xa8
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	8b 3a                	mov    (%rdx),%edi
   2:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
   8:	8b 4a 08             	mov    0x8(%rdx),%ecx
   b:	8b 72 04             	mov    0x4(%rdx),%esi
   e:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  11:	85 cd                	test   %ecx,%ebp
  13:	75 69                	jne    0x7e
  15:	89                   	.byte 0x89
[   16.000067][    T1] init: Error while reading from descriptor: Bad file descriptor
[   16.002247][    T1] init: Error while reading from descriptor: Bad file descriptor
[   16.004517][    T1] init: kernel-tests main process (82) killed by SEGV signal
[   16.007122][    T1] init: hostname main process (83) killed by SEGV signal
[   16.009669][    T1] init: plymouth main process (84) killed by SEGV signal
[   16.020244][    T1] init: hwclock main process (85) killed by SEGV signal
[   16.035819][    T1] init: mountall main process (86) killed by SEGV signal
[   16.046863][   T87] sh[87]: segfault at 27dcf138 ip b7f4dc4b sp bf8d6970 error 4 in ld-2.15.so[ac4b,b7f43000+20000] likely on CPU 1 (core 1, socket 0)
[ 16.052245][ T87] Code: ec 2c 8b 90 4c 01 00 00 89 5c 24 1c e8 69 df 00 00 81 c3 c2 63 01 00 89 74 24 20 85 d2 89 7c 24 24 89 6c 24 28 74 5b 8b 52 04 <8b> 3a 89 b8 78 01 00 00 8b 4a 08 8b 72 04 8d 69 ff 85 cd 75 69 89
All code
========
   0:	ec                   	in     (%dx),%al
   1:	2c 8b                	sub    $0x8b,%al
   3:	90                   	nop
   4:	4c 01 00             	add    %r8,(%rax)
   7:	00 89 5c 24 1c e8    	add    %cl,-0x17e3dba4(%rcx)
   d:	69 df 00 00 81 c3    	imul   $0xc3810000,%edi,%ebx
  13:	c2 63 01             	ret    $0x163
  16:	00 89 74 24 20 85    	add    %cl,-0x7adfdb8c(%rcx)
  1c:	d2 89 7c 24 24 89    	rorb   %cl,-0x76dbdb84(%rcx)
  22:	6c                   	insb   (%dx),%es:(%rdi)
  23:	24 28                	and    $0x28,%al
  25:	74 5b                	je     0x82
  27:	8b 52 04             	mov    0x4(%rdx),%edx
  2a:*	8b 3a                	mov    (%rdx),%edi		<-- trapping instruction
  2c:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
  32:	8b 4a 08             	mov    0x8(%rdx),%ecx
  35:	8b 72 04             	mov    0x4(%rdx),%esi
  38:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  3b:	85 cd                	test   %ecx,%ebp
  3d:	75 69                	jne    0xa8
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	8b 3a                	mov    (%rdx),%edi
   2:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
   8:	8b 4a 08             	mov    0x8(%rdx),%ecx
   b:	8b 72 04             	mov    0x4(%rdx),%esi
   e:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  11:	85 cd                	test   %ecx,%ebp
  13:	75 69                	jne    0x7e
  15:	89                   	.byte 0x89
[   16.061637][    T1] init: mountall post-stop process (87) killed by SEGV signal
[   16.078333][    T1] init: Error while reading from descriptor: Bad file descriptor
[   16.080704][    T1] init: plymouth-stop pre-start process (88) killed by SEGV signal
[   16.099555][   T89] sh[89]: segfault at dfc8d138 ip b7ef1c4b sp bfa63cf0 error 5 in ld-2.15.so[ac4b,b7ee7000+20000] likely on CPU 1 (core 1, socket 0)
[ 16.104368][ T89] Code: ec 2c 8b 90 4c 01 00 00 89 5c 24 1c e8 69 df 00 00 81 c3 c2 63 01 00 89 74 24 20 85 d2 89 7c 24 24 89 6c 24 28 74 5b 8b 52 04 <8b> 3a 89 b8 78 01 00 00 8b 4a 08 8b 72 04 8d 69 ff 85 cd 75 69 89
All code
========
   0:	ec                   	in     (%dx),%al
   1:	2c 8b                	sub    $0x8b,%al
   3:	90                   	nop
   4:	4c 01 00             	add    %r8,(%rax)
   7:	00 89 5c 24 1c e8    	add    %cl,-0x17e3dba4(%rcx)
   d:	69 df 00 00 81 c3    	imul   $0xc3810000,%edi,%ebx
  13:	c2 63 01             	ret    $0x163
  16:	00 89 74 24 20 85    	add    %cl,-0x7adfdb8c(%rcx)
  1c:	d2 89 7c 24 24 89    	rorb   %cl,-0x76dbdb84(%rcx)
  22:	6c                   	insb   (%dx),%es:(%rdi)
  23:	24 28                	and    $0x28,%al
  25:	74 5b                	je     0x82
  27:	8b 52 04             	mov    0x4(%rdx),%edx
  2a:*	8b 3a                	mov    (%rdx),%edi		<-- trapping instruction
  2c:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
  32:	8b 4a 08             	mov    0x8(%rdx),%ecx
  35:	8b 72 04             	mov    0x4(%rdx),%esi
  38:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  3b:	85 cd                	test   %ecx,%ebp
  3d:	75 69                	jne    0xa8
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	8b 3a                	mov    (%rdx),%edi
   2:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
   8:	8b 4a 08             	mov    0x8(%rdx),%ecx
   b:	8b 72 04             	mov    0x4(%rdx),%esi
   e:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  11:	85 cd                	test   %ecx,%ebp
  13:	75 69                	jne    0x7e
  15:	89                   	.byte 0x89
[   16.114058][    T1] init: mountall-shell main process (89) killed by SEGV signal
[   16.124734][   T90] sh[90]: segfault at 97b8b138 ip b7f31c4b sp bfda86e0 error 4 in ld-2.15.so[ac4b,b7f27000+20000] likely on CPU 1 (core 1, socket 0)
[ 16.129436][ T90] Code: ec 2c 8b 90 4c 01 00 00 89 5c 24 1c e8 69 df 00 00 81 c3 c2 63 01 00 89 74 24 20 85 d2 89 7c 24 24 89 6c 24 28 74 5b 8b 52 04 <8b> 3a 89 b8 78 01 00 00 8b 4a 08 8b 72 04 8d 69 ff 85 cd 75 69 89
All code
========
   0:	ec                   	in     (%dx),%al
   1:	2c 8b                	sub    $0x8b,%al
   3:	90                   	nop
   4:	4c 01 00             	add    %r8,(%rax)
   7:	00 89 5c 24 1c e8    	add    %cl,-0x17e3dba4(%rcx)
   d:	69 df 00 00 81 c3    	imul   $0xc3810000,%edi,%ebx
  13:	c2 63 01             	ret    $0x163
  16:	00 89 74 24 20 85    	add    %cl,-0x7adfdb8c(%rcx)
  1c:	d2 89 7c 24 24 89    	rorb   %cl,-0x76dbdb84(%rcx)
  22:	6c                   	insb   (%dx),%es:(%rdi)
  23:	24 28                	and    $0x28,%al
  25:	74 5b                	je     0x82
  27:	8b 52 04             	mov    0x4(%rdx),%edx
  2a:*	8b 3a                	mov    (%rdx),%edi		<-- trapping instruction
  2c:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
  32:	8b 4a 08             	mov    0x8(%rdx),%ecx
  35:	8b 72 04             	mov    0x4(%rdx),%esi
  38:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  3b:	85 cd                	test   %ecx,%ebp
  3d:	75 69                	jne    0xa8
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	8b 3a                	mov    (%rdx),%edi
   2:	89 b8 78 01 00 00    	mov    %edi,0x178(%rax)
   8:	8b 4a 08             	mov    0x8(%rdx),%ecx
   b:	8b 72 04             	mov    0x4(%rdx),%esi
   e:	8d 69 ff             	lea    -0x1(%rcx),%ebp
  11:	85 cd                	test   %ecx,%ebp
  13:	75 69                	jne    0x7e
  15:	89                   	.byte 0x89
[   16.137710][    T1] init: mountall-shell post-stop process (90) killed by SEGV signal
BUG: kernel hang in test stage



The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250206/202502061612.1f8d78d8-lkp@intel.com


-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


                 reply	other threads:[~2025-02-06  8:39 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202502061612.1f8d78d8-lkp@intel.com \
    --to=oliver.sang@intel.com \
    --cc=lkp@intel.com \
    --cc=oe-lkp@lists.linux.dev \
    --cc=willy@infradead.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.